chore(deps): bump the all-dependencies group with 5 updates

[dependabot]

Bumps the all-dependencies group with 5 updates:

Package	From	To
cachetools	7.1.1	7.1.3
openai	2.36.0	2.37.0
requests	2.34.0	2.34.2
sentence-transformers	5.4.1	5.5.0
torch	2.11.0	2.12.0

Updates cachetools from 7.1.1 to 7.1.3

Changelog

Sourced from cachetools's changelog.

v7.1.3 (2026-05-18)

• Minor type stub improvements.

• Update build environment.

v7.1.2 (2026-05-16)

• Minor type stub improvements.

• Minor documentation improvements.

• Modernize build environment.

Commits

• 16952ed Release v7.1.3.
• 92dd756 Prepare v7.1.3.
• ced08f5 Improve cachetools.func type stubs.
• d809d7b Update build environment.
• c84b5e5 Release v7.1.2.
• 39ad61c Prepare v7.1.2.
• ed10781 Update Copilot instructions.
• c624ceb Fix #395: Document FIFOCache update behavior.
• 1ddec06 Fix/396 (#398)
• b91818c Drop MANIFEST.in.
• Additional commits viewable in compare view

Updates openai from 2.36.0 to 2.37.0

Release notes

Sourced from openai's releases.

v2.37.0

2.37.0 (2026-05-13)

Full Changelog: v2.36.0...v2.37.0

Features

• api: add service_tier parameter to responses compact method (625827c)
• internal/types: support eagerly validating pydantic iterators (7e527bc)
• Remove unnecessary client_id when using workload identity provider for auth (c39ea8d)

Bug Fixes

• client: add missing f-string prefix in file type error message (c85ebd9)

Changelog

Sourced from openai's changelog.

2.37.0 (2026-05-13)

Full Changelog: v2.36.0...v2.37.0

Features

• api: add service_tier parameter to responses compact method (625827c)
• internal/types: support eagerly validating pydantic iterators (7e527bc)
• Remove unnecessary client_id when using workload identity provider for auth (c39ea8d)

Bug Fixes

• client: add missing f-string prefix in file type error message (c85ebd9)

Commits

• 658be64 Merge pull request #3213 from openai/release-please--branches--main--changes-...
• 8a7cac3 release: 2.37.0
• 9b4bf8e Merge pull request #1903 from stainless-sdks/dev/jtian/remove-unnecessary-params
• c39ea8d feat: Remove unnecessary client_id when using workload identity provider for ...
• 7e527bc feat(internal/types): support eagerly validating pydantic iterators
• 625827c feat(api): add service_tier parameter to responses compact method
• c85ebd9 fix(client): add missing f-string prefix in file type error message
• See full diff in compare view

Updates requests from 2.34.0 to 2.34.2

Release notes

Sourced from requests's releases.

v2.34.2

2.34.2 (2026-05-14)

• Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2342-2026-05-14

v2.34.1

2.34.1 (2026-05-13)

Bugfixes

• Widened json input type from dict and list to Mapping and Sequence. (#7436)
• Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
• Response.reason moved from str | None to str to improve handling for users. (#7437)
• Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

New Contributors

• @​k223kim made their first contribution in psf/requests#7433

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2341-2026-05-13

Changelog

Sourced from requests's changelog.

2.34.2 (2026-05-14)

• Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

2.34.1 (2026-05-13)

Bugfixes

• Widened json input type from dict and list to Mapping and Sequence. (#7436)
• Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
• Response.reason moved from str | None to str to improve handling for users. (#7437)
• Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

Commits

• 6e83187 v2.34.2
• 84d10f0 Move Request.headers back to Mapping (#7441)
• b7b549b v2.34.1
• e511bc7 Fix mutability issues with headers input types (#7431)
• 5691f59 Update JsonType containers to read-based collections (#7436)
• 2144213 Constrain Response.reason to str (#7437)
• 6404f34 Fix prepare_body stream detection for __getattr__-based file wrappers (#7...
• See full diff in compare view

Updates sentence-transformers from 5.4.1 to 5.5.0

Release notes

Sourced from sentence-transformers's releases.

v5.5.0 - Training Agent Skill, EmbedDistillLoss, and ADRMSELoss

This release ships the train-sentence-transformers Agent Skill, adds two new training losses, and brings a long list of robustness and correctness fixes.

The new train-sentence-transformers Agent Skill lets AI coding agents (Claude Code, Codex, Cursor, Gemini CLI, ...) drive end-to-end training and fine-tuning across all three model types. EmbedDistillLoss is a new embedding-level knowledge distillation loss for SentenceTransformer: it aligns a student model's embeddings with pre-computed teacher embeddings, an alternative to the score-based distillation provided by MarginMSELoss and DistillKLDivLoss. ADRMSELoss is a new listwise learning-to-rank loss for CrossEncoder from the Rank-DistiLLM paper. encode() and predict() also gain a per-call processing_kwargs override, and more.

Install this version with

# Training + Inference
pip install sentence-transformers[train]==5.5.0
Inference only, use one of:
pip install sentence-transformers==5.5.0
pip install sentence-transformers[onnx-gpu]==5.5.0
pip install sentence-transformers[onnx]==5.5.0
pip install sentence-transformers[openvino]==5.5.0
Multimodal dependencies (optional):
pip install sentence-transformers[image]==5.5.0
pip install sentence-transformers[audio]==5.5.0
pip install sentence-transformers[video]==5.5.0
Or combine as needed:
pip install sentence-transformers[train,onnx,image]==5.5.0

The train-sentence-transformers Agent Skill (#3752)

If you use an AI coding agent (Claude Code, Codex, Cursor, Gemini CLI, OpenCode, ...), you can now install the train-sentence-transformers Agent Skill and ask your agent to fine-tune a model on your data:

hf skills add train-sentence-transformers              # installs under ./.agents/skills/
hf skills add train-sentence-transformers --global     # installs under ~/.agents/skills/
hf skills add train-sentence-transformers --claude     # also symlinks into .claude/skills/

The skill gives the agent curated, version-aware guidance for training SentenceTransformer (bi-encoder), CrossEncoder (reranker), and SparseEncoder/SPLADE models, covering base model selection, loss and evaluator choice, hard-negative mining, distillation, LoRA, Matryoshka, multilingual training, static embeddings, plus a set of production-ready training template scripts. Then you can prompt your agent with things like:

"Train a multilingual sentence-transformer on Dutch legal pairs."

"Fine-tune a cross-encoder reranker on (question, answer) pairs from my dataset, mine hard negatives, and push to my Hub repo."

"Train a German sparse embedding model with high sparsity."

"Can you train a static embedding model on 100k code triplets?"

The skill lives in the repository under skills/train-sentence-transformers/ and is mirrored to the huggingface/skills marketplace on each release.

New loss: EmbedDistillLoss (#3665)

... (truncated)

Commits

• f9f3269 Merge branch 'main' into v5.5-release
• 02dc21d Update index tip for v5.5.0 (#3774)
• 833828b Release v5.5.0
• 98ac358 [docs] Load models in float32 in the training examples & docs (#3773)
• d8ee041 [docs] Use modality-neutral terms (input, document) in loss docs & docstrin...
• 4c6850e [examples] Avoid LoggingHandler, silence httpx in examples (#3771)
• 1418823 docs: fix grammar in parallel-sentence-mining README (#3769)
• 22a383d [docs] Use direct class imports in examples & docs (drop `losses.MSELoss(.....
• 68e4d61 [fix] Unwrap DDP/torch.compile wrappers in AdaptiveLayerLoss (#3768)
• 8151750 [fix] Use first non-pad token for CLS pooling with left-padding (#3767)
• Additional commits viewable in compare view

Updates torch from 2.11.0 to 2.12.0

Release notes

Sourced from torch's releases.

PyTorch 2.12.0 Release Notes

• Highlights
• Backwards Incompatible Changes
• Deprecations
• New Features
• Improvements
• Bug fixes
• Performance
• Documentation
• Developers
• Security

Highlights

For more details about these highlighted features, you can look at the release blogpost. Below are the full release notes for this release.

Backwards Incompatible Changes

Build Frontend

• Strengthened SVE compile checks in FindARM.cmake, which may reject previously accepted but incorrect SVE configurations (#176646)

  Source builds that enable SVE now validate the compiler configuration more strictly. If a build previously passed with an incomplete or mismatched SVE setup, it may now fail during CMake configuration instead of later in compilation. Update the compiler/toolchain flags so they accurately describe the target SVE support, or disable SVE for that build.

• Updated the minimum CUDA version required to build PyTorch from source to CUDA 12.6 (#178925)

  Building PyTorch from source with CUDA versions older than 12.6 is no longer supported. Users building custom binaries should install CUDA 12.6 or newer and make sure CUDA_HOME points to that installation.

  Version 2.11:

  CUDA_HOME=/usr/local/cuda-12.4 python setup.py develop

  Version 2.12:

  CUDA_HOME=/usr/local/cuda-12.6 python setup.py develop

• Enforced a C++20 minimum in CMake build files (#178662)

... (truncated)

Commits

• 0d62256 [release] Dockerfile: skip torchaudio install when CUDA_PATH=cu132 (#183346)
• 7661cd9 [MPS] Fix SDPA wrong output for permuted q/k/v with B > 1 (#181886)
• 9da6087 Fix stale PYTORCH_RELEASES_CODE_CC dict (fixes #182250) (#182369)
• e4c37cc Avoid raw stream name collisions in Inductor (#182178)
• 822d047 [MPS] Fix bool mask handling in 1-pass SDPA decode kernel (#182285) (#182311)
• 5c5e523 Add enable_gqa parameter to SDPA MPS meta registration (#181550)
• eece52e [AOTI] Add BC-safe c_shim v2 for _scaled_dot_product_attention_math_for_mps e...
• b39330b [Inductor] Call latest c_shim version for versioned fallback ops (#181548)
• 06f10d0 Revert "[FSDP2] add fqn to communication ops" (#182100) (#182157)
• 449e339 Revert "[Inductor] Improve materialization heuristic for a chain of computaio...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions